Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.mft
File: 1bAhsehBJlk8722YgDQTqnLQAeA.mft (raw, json)
Hash identifier: ILTbGp/K4WmCQOYValihAeH22x7tQvz4JIJY+ejMO30=
Subject key identifier: 0B:68:F2:62:BD:F9:79:40:3D:2F:A4:AB:36:AF:62:D3:0D:DD:27:E4
Authority key identifier: D5:B0:21:B1:E8:41:26:59:3C:EF:6D:98:80:34:13:AA:72:D0:01:E0
Certificate issuer: /CN=d5b021b1e84126593cef6d98803413aa72d001e0
Certificate serial: 01A0404DB2FE59828AD40DFC32D8F43142BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bAhsehBJlk8722YgDQTqnLQAeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.mft
Manifest number: 034E
Signing time: Wed 26 Aug 2026 23:00:28 +0000
Manifest this update: Wed 26 Aug 2026 23:00:28 +0000
Manifest next update: Thu 27 Aug 2026 23:00:28 +0000
Files and hashes: 1: 1bAhsehBJlk8722YgDQTqnLQAeA.crl (hash: r/3MoiWCPTuBLW5JgTPFtzWA/qlD8FcKP5D6Nyl/xhY=)
2: J4-0xOuc7ybl1SkKKEI_GYBUqr4.roa (hash: 2q5jjo4zIqBtwYfXVL0EEJ2OzEi2CDWkpY8YOeiu7aA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bAhsehBJlk8722YgDQTqnLQAeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4d:b2:fe:59:82:8a:d4:0d:fc:32:d8:f4:31:42:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b021b1e84126593cef6d98803413aa72d001e0
Validity
Not Before: Aug 26 23:00:28 2026 GMT
Not After : Aug 27 23:00:28 2026 GMT
Subject: CN=0b68f262bdf979403d2fa4ab36af62d30ddd27e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:28:46:fc:7c:a6:f9:82:94:a8:58:98:5b:a6:
e9:f5:d0:50:00:56:49:49:a9:e2:ea:a2:1e:8e:83:
4f:7c:27:d8:34:99:a2:e8:8a:d1:b3:4a:28:23:0b:
6b:2c:11:2d:1e:d5:8f:d8:86:2c:43:5f:b5:0f:c2:
3e:18:a0:d0:3a:88:54:e5:c6:9d:33:3c:70:09:cd:
66:71:c8:d9:31:07:45:ae:ca:0a:a8:09:64:2d:d5:
a7:e0:eb:ab:f2:4b:a9:4b:8f:2c:44:65:c6:aa:39:
fb:a2:3c:e7:51:d7:f6:34:b1:1d:5b:af:f3:98:d0:
fd:b3:81:f3:9b:6d:ca:4c:52:b8:4b:5a:20:ab:f6:
1d:34:bd:f0:38:b6:d1:35:9e:11:9f:f2:29:51:5e:
1a:b7:f5:a3:a1:3f:2c:e2:c7:96:c1:1c:31:1d:da:
a5:10:96:2a:cd:b9:04:14:19:77:8b:a7:14:78:0f:
3c:e1:6d:ad:7b:4b:9b:c4:85:07:34:f3:f1:fd:42:
4a:9e:42:33:c6:d4:07:86:01:5c:41:46:c3:d9:d1:
74:42:12:0f:1d:40:9b:2e:11:c8:9c:dd:63:cb:49:
29:23:e1:2c:40:8f:37:e4:1e:21:4f:c4:92:dd:4d:
7d:84:77:91:21:0f:17:f6:3c:47:6d:11:b6:eb:12:
f4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:68:F2:62:BD:F9:79:40:3D:2F:A4:AB:36:AF:62:D3:0D:DD:27:E4
X509v3 Authority Key Identifier:
keyid:D5:B0:21:B1:E8:41:26:59:3C:EF:6D:98:80:34:13:AA:72:D0:01:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bAhsehBJlk8722YgDQTqnLQAeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:79:e2:39:6d:f7:23:ea:84:3a:08:1e:29:02:21:6d:dd:31:
5e:40:4a:de:5a:fb:0d:19:a8:e5:c8:93:12:d4:5e:0c:6d:8a:
4b:d0:af:bd:a9:13:c5:17:84:fb:85:fa:91:1f:c8:0d:20:fc:
2c:a0:6a:8d:aa:2a:7c:97:a6:26:e2:5c:33:aa:79:7d:b1:37:
4e:2e:26:3b:0c:87:b6:a8:f6:17:25:25:9f:2f:01:3f:6a:f9:
20:be:29:1b:6e:0b:6d:b1:9a:20:e0:0a:34:05:e5:eb:3e:78:
0d:1c:15:d4:bd:a5:3c:cb:f3:3a:58:79:e2:c2:bb:5f:dd:e7:
b7:1b:b5:4d:aa:b5:b3:df:b0:b1:fd:79:8d:6c:d9:eb:81:73:
2e:0e:dd:3e:33:76:0a:93:8b:a9:89:a6:01:ef:81:5c:6a:74:
43:8c:e1:86:65:da:cf:3d:21:3d:d2:44:af:8d:cb:cb:06:26:
ab:61:b5:d6:26:a8:62:de:bc:e3:8a:3b:94:ff:28:56:ef:0c:
22:61:aa:0d:57:98:d6:a4:c5:f4:83:c2:cc:7e:2f:ca:a4:ce:
36:87:c4:f8:04:99:0d:cf:f9:ca:d2:c5:ce:84:d2:2f:af:7f:
38:ea:cc:ad:f9:50:70:66:bd:70:a2:00:a3:08:c5:34:aa:e7:
7b:9e:90:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBATbL+WYKK1A38Mtj0MUK8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YjAyMWIxZTg0MTI2NTkzY2VmNmQ5ODgwMzQxM2FhNzJk
MDAxZTAwHhcNMjYwODI2MjMwMDI4WhcNMjYwODI3MjMwMDI4WjAzMTEwLwYDVQQD
EygwYjY4ZjI2MmJkZjk3OTQwM2QyZmE0YWIzNmFmNjJkMzBkZGQyN2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoihG/Hym+YKUqFiYW6bp9dBQAFZJ
Sani6qIejoNPfCfYNJmi6IrRs0ooIwtrLBEtHtWP2IYsQ1+1D8I+GKDQOohU5cad
MzxwCc1mccjZMQdFrsoKqAlkLdWn4Our8kupS48sRGXGqjn7ojznUdf2NLEdW6/z
mND9s4Hzm23KTFK4S1ogq/YdNL3wOLbRNZ4Rn/IpUV4at/WjoT8s4seWwRwxHdql
EJYqzbkEFBl3i6cUeA884W2te0ubxIUHNPPx/UJKnkIzxtQHhgFcQUbD2dF0QhIP
HUCbLhHInN1jy0kpI+EsQI835B4hT8SS3U19hHeRIQ8X9jxHbRG26xL0CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAto8mK9+XlAPS+kqzavYtMN3SfkMB8GA1UdIwQY
MBaAFNWwIbHoQSZZPO9tmIA0E6py0AHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWJBaHNlaEJKbGs4NzIyWWdEUVRxbkxRQWVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZGNhMzQtNzQ1Yy00MTgwLWIwZjAt
MDFkZGEzNzRkNjdmLzEvMWJBaHNlaEJKbGs4NzIyWWdEUVRxbkxRQWVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80ZGNhMzQtNzQ1Yy00MTgwLWIwZjAtMDFkZGEzNzRkNjdm
LzEvMWJBaHNlaEJKbGs4NzIyWWdEUVRxbkxRQWVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3niOW33
I+qEOggeKQIhbd0xXkBK3lr7DRmo5ciTEtReDG2KS9CvvakTxReE+4X6kR/IDSD8
LKBqjaoqfJemJuJcM6p5fbE3Ti4mOwyHtqj2FyUlny8BP2r5IL4pG24LbbGaIOAK
NAXl6z54DRwV1L2lPMvzOlh54sK7X93ntxu1Taq1s9+wsf15jWzZ64FzLg7dPjN2
CpOLqYmmAe+BXGp0Q4zhhmXazz0hPdJEr43LywYmq2G11iaoYt6844o7lP8oVu8M
ImGqDVeY1qTF9IPCzH4vyqTONofE+ASZDc/5ytLFzoTSL69/OOrMrflQcGa9cKIA
owjFNKrne56QPg==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:55:30 2026 by rpki-client